chore(mise): upgrade local tools

[ghappforreleaseplease]

Automated mise tool upgrades from local config.

mise-managed tools:

• action-validator
• actionlint
• editorconfig-checker
• ghalint
• lychee
• pinact
• pipx:gh-action-pulse
• prek
• rumdl
• shellcheck
• shfmt
• tombi
• uv
• yamlfmt
• yamllint
• zizmor

Command: mise upgrade --bump --local action-validator actionlint editorconfig-checker ghalint lychee pinact pipx:gh-action-pulse prek rumdl shellcheck shfmt tombi uv yamlfmt yamllint zizmor

Version changelog (4 tools)

Tool	Requested	Installed
prek	0.5.3 → 0.5.4	0.5.3 → 0.5.4
rumdl	0.2.77 → 0.2.78	0.2.77 → 0.2.78
tombi	1.5.6 → 1.7.1	1.5.6 → 1.7.1
uv	0.12.19 → 0.12.23	0.12.19 → 0.12.23

Release notes (4 tools)

prek: `0.5.3` → `0.5.4` (j178/prek)

v0.5.4

Release Notes

Released on 2026-09-28.

Highlights

Faster builtin hooks

In our end-to-end benchmark, prek is about 38% faster than 0.5.3, with some builtin
hooks up to 273% faster (check-yaml: 273%, check-json: 80%,
check-merge-conflict: 71%).

Enhancements

• Add include_deleted to allow hooks to include deleted files (#2733)
• Add --check and simplify end-of-file-fixer (#2764)
• Add --check to file-contents-sorter (#2765)
• Add --check to requirements-txt-fixer (#2766)
• Add --check to trailing-whitespace (#2763)
• Expose and document prek util generate-shell-completion (#2727)
• Support hide_status in project and user configuration (#2760)
• Support look-around regex in builtin pattern hooks (#2732)

Performance

• Cache the resolved Git executable on macOS (#2726)
• Combine and cache Git repository path queries (#2724)
• Optimize common builtin hook execution (#2768)
• Optimize scanning in mixed-line-ending and trailing-whitespace (#2769)
• Scan check-merge-conflict files in fixed-size blocks (#2781)
• Use SIMD UTF-8 validation in check-json, check-toml, and check-yaml (#2770)

Bug fixes

• Retry transient rename failures on Windows (#2756)
• Use PATH to resolve prek in completion scripts (#2719)

Documentation

• Clarify… (truncated)

rumdl: `0.2.77` → `0.2.78` (rvben/rumdl)

v0.2.78

Added

• MD013: add cjk-soft-break option to join CJK line breaks without a space (5b5a744)
• MD013: reflow definition list definitions (f07ddc8)

Fixed

• MD013: keep CJK sentences on separate lines in semantic-line-breaks mode (ea2798d)
• MD013: join soft breaks in MkDocs admonitions and tabs with one space (962f1ee)
• code-block-tools: invalidate cached results when a lint tool changes (5ff393b)
• code-block-tools: treat empty formatter output as a tool failure (8e1a0e7)
• code-block-tools: report lint tool failures at their block and honor on-error in check (9f3ea71)
• playground: build the playground engine from the repository at deploy time (e342590)
• keep each line's ending when fixing a file with mixed line endings (6491db8)
• lsp: apply every content change in a didChange notification (499d132)
• output: map rule severity onto GitLab Code Quality severity (9e795b9)
• MD032: withhold blank lines that would change how the lists parse ([0db96d9](rvben/rumdl@0db96d9198a0637153dee45c53f6… (truncated)

tombi: `1.5.6` → `1.7.1` (tombi-toml/tombi)

v1.5.7

What's Changed

🛠️ Other Changes

• fix(lsp): prevent composite tooltip headings by @​ya7010 in fix(lsp): prevent composite tooltip headings tombi-toml/tombi#2225

Full Changelog: tombi-toml/tombi@v1.5.6...v1.5.7

v1.5.8

What's Changed

🛠️ Other Changes

• fix(release): skip unready tombi-lib package in npm publish loop by @​ya7010 in fix(release): skip unready tombi-lib package in npm publish loop tombi-toml/tombi#2226

Full Changelog: tombi-toml/tombi@v1.5.7...v1.5.8

v1.5.10

What's Changed

🛠️ Other Changes

• fix: route file:// resolution through tombi_fs and share wasm workspace injection by @​ya7010 in fix: route file:// resolution through tombi_fs and share wasm workspace injection tombi-toml/tombi#2227
• feat(tombi-lib): add shared core crate for format/lint by @​ya7010 in feat(tombi-lib): add shared core crate for format/lint tombi-toml/tombi#2228
• feat(tombi-lib): add PyO3 bindings and python/tombi-lib package by @​ya7010 in feat(tombi-lib): add PyO3 bindings and python/tombi-lib package tombi-toml/tombi#2229
• feat(tombi-lib): add napi-rs Node.js binding and npm packaging by @​ya7010 in feat(tombi-lib): add napi-rs Node.js binding and npm packaging tombi-toml/tombi#2230
• feat(tombi-lib): add formatSync/lintSync to the Node.js binding by @​ya7010 in feat(tombi-lib): add formatSync/lintSync to the Node.js binding tombi-toml/tombi#2232
• ci(npm): publish the Node.js library as @​tombi-toml/lib and tombi-lib by @​ya7010 in ci(npm): publish the Node.js library as @tombi-toml/lib and tombi-lib tombi-toml/tombi#2233
• refactor(npm): rename @​tombi-toml/tombi to @​tombi-toml/cli by @​ya7010 in refactor(npm): rename @tombi-toml/tombi to @tombi-toml/cli tombi-toml/tombi#2234
• docs: add tombi-lib documentation for Python and Node.js by @​ya7010 in docs: add tombi-lib documentation for Python and Node.js tombi-toml/tombi#2231
• ci(pypi): build and publish tombi-lib to PyPI by @​ya7010 in ci(pypi): build and publish tombi-lib to PyPI tombi-toml/tombi#2235
• fix(deps): bump fast-uri to 3.1.7 and undici to 7.29.1 by @​ya7010 in fix(deps): bump fast-uri to 3.1.7 and undici to 7.29.1 tombi-toml/tombi#2237
• ci(wasm): avoid double wasm builds and parallelize lib/lsp jobs by @​ya7010 in ci(wasm): avoid double wasm builds and parallelize lib/lsp jobs tombi-toml/tombi#2238
• feat(wasm-lib): restore TombiWasmError as deprecated alias of TombiError by @​ya7010 in feat(wasm-lib): restore TombiWasmError as deprecated alias of TombiError tombi-toml/tombi#2239
• docs: highlight Python code and clarify tombi-lib vs tombi-wasm-lib by @​ya7010 in docs: highlight Python code and clarify tombi-lib vs tombi-wasm-lib tombi-toml/tombi#2240
• fix(lsp): complete $key for tables with additionalProperties: true by @​ya7010 in fix(lsp): complete $key for tables with additionalProperties: true tombi-toml/tombi#2241
• fix(lib): unify tombi-lib and wasm-lib interfaces by @​ya7010 in https://github.com/t… (truncated)

v1.6.0

What's Changed

tombi-lib is now available on pypi / npm, allowing format and lint to be executed from programming languages.

🛠️ Other Changes

• fix(ci): publish VSCode extensions in dedicated jobs by @​ya7010 in fix(ci): publish VSCode extensions in dedicated jobs tombi-toml/tombi#2245
• fix(deps): bump markdown-it to 14.3.1 by @​ya7010 in fix(deps): bump markdown-it to 14.3.1 tombi-toml/tombi#2246
• fix(vscode): look up node_modules/tombi before scoped packages by @​ya7010 in fix(vscode): look up node_modules/tombi before scoped packages tombi-toml/tombi#2247

Full Changelog: tombi-toml/tombi@v1.5.10...v1.6.0

v1.6.1

What's Changed

🛠️ Other Changes

• ci(npm): stop publishing the @​tombi-toml/tombi alias by @​ya7010 in ci(npm): stop publishing the @tombi-toml/tombi alias tombi-toml/tombi#2248
• fix(validator): don't report unused-noqa for deprecated rules used by combinator branches by @​ya7010 in fix(validator): don't report unused-noqa for deprecated rules used by combinator branches tombi-toml/tombi#2249

Full Changelog: tombi-toml/tombi@v1.6.0...v1.6.1

v1.7.0

What's Changed

We have added --diagnostics-format and --diagnostics-file to the CLI, along with output formats such as github and gitlab.

Please refer to the documentation for details.

🦅 New Features

• feat(cli): add --diagnostics-format and --diagnostics-file by @​ya7010 in feat(cli): add --diagnostics-format and --diagnostics-file tombi-toml/tombi#2250

🛠️ Other Changes

• refactor: keep Span through diagnostics and convert to Range with LineIndex at the output boundary by @​ya7010 in refactor: keep Span through diagnostics and convert to Range with LineIndex at the output boundary tombi-toml/tombi#2254
• perf(formatter): only scan the last line in current_line_width by @​ya7010 in perf(formatter): only scan the last line in current_line_width tombi-toml/tombi#2255
• perf(document-tree): avoid O(n^2) scan in Table::merge for key-value tables by @​ya7010 in perf(document-tree): avoid O(n^2) scan in Table::merge for key-value tables tombi-toml/tombi#2256
• perf(formatter): memoize exceeds_line_width to fix exponential time on nested arrays by @​ya7010 in perf(formatter): memoize exceeds_line_width to fix exponential time on nested arrays tombi-toml/tombi#2257
• fix(deps): bump brace-expansion, dompurify and fast-uri overrides by @​ya7010 in fix(deps): bump brace-expansion, dompurify and fast-uri overrides tombi-toml/tombi#2258
• perf: build a per-tree header index to remove O(n^2) sibling header walks by @​ya7010 in perf: build a per-tree header index to remove O(n^2) sibling header walks tombi-toml/tombi#2260
• refactor: keep JSON positions as Span and convert with LineIndex at the output boundary by @​ya7010 in refactor: keep JSON positions as Span and convert with LineIndex at the output boundary tombi-toml/tombi#2261
• perf: scan JSON bytes, stream tokens into the parser and share parsed containers by @​ya7010 in perf: scan JSON bytes, stream tokens into the parser and share parsed containers tombi-toml/tombi#2263
• perf: borrow the source and LineIndex instead of reference-counting them by @​ya7010 in perf: borrow the source and LineIndex instead of reference-counting them tombi-toml/tombi#2262
• test: keep the issue-2164 fixture valid and pass the invalid text inline by @​ya7010 in test: keep the issue-2164 fixture valid and pass the invalid text inline tombi-toml/tombi#2264

Full Changelog: https://github.c… (truncated)

v1.7.1

What's Changed

🛠️ Other Changes

• fix: do not truncate the file before writing formatted text by @​ya7010 in fix: do not truncate the file before writing formatted text tombi-toml/tombi#2266

Full Changelog: tombi-toml/tombi@v1.7.0...v1.7.1

uv: `0.12.19` → `0.12.23` (astral-sh/uv)

0.12.20

Release Notes

Released on 2026-09-28.

Enhancements

• Reuse lockfiles when dependency declarations are semantically equivalent (#21951)
• Preserve second-line encoding declarations when installing wheel scripts with CRLF shebangs (#21990)

Preview features

• Write normalized requirement declarations with the lockfile-normalization preview feature (#21951)
• Honor synthetic default groups when installing or syncing from pylock.toml (#22003)
• Resolve local paths in exported pylock.toml files relative to the output file (#22042)
• Install each package only once when repeated tool-install-locks requirements resolve to the same package (#22000)
• Reuse lock-without-metadata lockfiles for conflicting groups with distinct base and extra requirement specifiers (#22055)
• Use consistent root-package paths in uv workspace metadata and uv tree --format json output (#22050)

Configuration

• Continue searching XDG_CONFIG_DIRS after empty entries (#21987)

Performance

• Restore the previous HTTP cache-write scheduling while investigating severe cache-revalidation stalls on ext4 filesystems (#22051)

Bug fixes

• Apply hash constraints to every repeated requirement under --require-hashes and --verify-hashes (#21996)
• Allow metadata builds for first-party workspace projects under --no-build (#21988)
• Honor project exclusion flags with --all-packages, including `--no-install… (truncated)

0.12.21

Release Notes

Released on 2026-09-29.

Python

• Update CPython to use OpenSSL 3.5.9 (#22076)

Enhancements

• Omit empty [manifest] tables from lockfiles that contain only manifest subtables (#22070)

Preview features

• Omit redundant runtime constraints from uv.lock, including those involving pre-releases, with the resolution-inputs preview feature (#22004, #22068)

Bug fixes

• Prevent uv python pin --rm from removing a global .python-versions file without --global (#21992)
• Fix installed-package checks incorrectly reporting post-releases as incompatible with exclusive lower bounds on pre-releases (#22049)

Install uv 0.12.21

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.12.21/uv-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.12.21/uv-installer.ps1 | iex"

Download uv 0.12.21

File	Platform	Checksum
uv-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	checksum
uv-x86_64-apple-darwin.tar.gz	Intel macOS	checksum
[uv-aarch64-pc-windows-msvc.zip](https://r… (truncated)

0.12.22

Release Notes

Released on 2026-10-01.

Python

• Add CPython 3.10.22, 3.11.17, 3.12.15, 3.13.16, and 3.14.8 (#22147)

Enhancements

• Accept uppercase release suffixes in wheel platform tags (#22113)
• Record workspace-member default groups in lockfiles (#22010, #22103)
• Record workspace-member dependency-group Python requirements in lockfiles (#22044, #22103)
• Record default groups for non-project workspace roots in lockfiles (#22104)
• Record dependency-group Python requirements for non-project workspace roots in lockfiles (#22104)
• Format URLs and paths consistently in CLI messages (#21937)
• Hide the unsupported --offline option from uv publish help (#22124)

Preview features

• Honor --no-default-groups in uv audit (#22090)
• Report a clear error when uv audit or uv tool audit runs offline and hide the unsupported option from help (#22114)

Configuration

• Add UV_PYTHON_ARCH to select an interpreter architecture independently of its Python version (#22098)

Performance

• Reduce uv's binary size by compressing embedded Python download metadata (#22126)

Bug fixes

• Verify unchanged requirements against existing lockfile hashes when relocking (#22083)
• Honor dependency-group Python requirements at non-project workspace roots… (truncated)

0.12.23

Release Notes

Released on 2026-10-03.

Python

• Add CPython 3.15.0rc3 (#22164)

Preview features

• Sync from uv.lock without a workspace manifest using uv sync --frozen with frozen-lockfile (#22018)
• Export from uv.lock without a workspace manifest using uv export --frozen with frozen-lockfile (#22007)
• Inspect dependency trees from uv.lock without a workspace manifest using uv tree --frozen with frozen-lockfile (#22016)
• Inspect workspace metadata and optionally sync its environment from uv.lock without a workspace manifest using uv workspace metadata --frozen with frozen-lockfile (#22017, #22018)

Bug fixes

• Reject alternate sources for workspace members across conflicting dependency selections, avoiding lockfiles that cannot be installed (#22153)
• Allow x86-64 Python interpreters running under emulation on Windows ARM64 to install compatible win_amd64 wheels instead of building from source (#22099)

Install uv 0.12.23

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/uv/releases/download/0.12.23/uv-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/uv/releases/download/0.12.23/uv-installer.ps1 | iex"

Download uv 0.12.23

File	Platform	Checksum
uv-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	[checksum](… (truncated)

Modified files:

• .mise.toml

[github-actions]

Commit Check

✅ All 4 checks passed

Show all 4 checks

Commit message
  ✔ Commit 1/1 (3e2d5f9) (chore(mise): upgrade local tools)
Branch
  ✔ Branch (chore/mise-tool-updates-20261005150651)
Author
  ✔ Author name (github-actions[bot])
  ✔ Author email (41898282+github-actions[bot]@users.noreply.github.com)

commit-check 2.17.0 · Rules reference

[jylenhof]

@dependabot rebase

[jylenhof]

LGTM